maccabi-pharm-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's CLI and MaccabiAdapter (scripts/pharmacy-search.js) explicitly fetch and parse live JSON from the public Maccabi API at https://serguide.maccabi4u.co.il (catalog and SearchPage endpoints), and those external results are directly used to drive search/stock decisions and automated actions.